StackRadar

CVE-2018-20060

Critical

Advisory

Published 11 Dec 2018In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.045
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
2 of 2
affected packages

Exposure of Sensitive Information to an Unauthorized Actor in urllib3

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+2 more1.2336
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.21.13.1-2ubuntu0.16.04.36
OSV records
GHSA-www2-v7xj-xrc6UBUNTU-CVE-2018-20060
Also known as
PYSEC-2018-32, USN-3990-1

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
blacktop/httpie:latestfc5e68e2f5ab
urllib3@1.22
1.23

Open the chart page →

6,868
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
urllib3@1.22
1.23

Open the chart page →

1,848
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
urllib3@1.22
1.23

Open the chart page →

13,541
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-urllib3@1.7.1-1build1
urllib3@1.7.1
no fix listed
1.23

Open the chart page →

41,427
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
urllib3@1.10.2
1.23

Open the chart page →

1,650
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
urllib3@1.22
1.23

Open the chart page →

3,212
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
urllib3@1.22
1.23

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
urllib3@1.22
1.23

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
urllib3@1.22
1.23
neilpeterson/get-tweet:v28b645ac1a23e
urllib3@1.22
1.23
neilpeterson/process-tweet:latest39ce9f92e899
urllib3@1.22
1.23

Open the chart page →

11,833
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
urllib3@1.21.1
1.23

Open the chart page →

2,408
couchdbcloudnativeapp1.1.32 of 3See more

couchdb cloudnativeapp 1.1.3

2 of the 3 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
urllib3@1.22
1.23
library/couchdb:2.3.0ee75c9a737e7
urllib3@1.19.1
1.23

Open the chart page →

2,110
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
urllib3@1.22
1.23

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
urllib3@1.22
1.23

Open the chart page →

77,758
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-urllib3@1.7.1-1ubuntu4
urllib3@1.7.1
no fix listed
1.23
galaxy/galaxy-stable:v18.018e577a626dfd
python-urllib3@1.7.1-1ubuntu4
urllib3@1.22
no fix listed
1.23

Open the chart page →

70,895
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
urllib3@1.22
1.23

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
urllib3@1.22
1.23

Open the chart page →

24,335
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
amundsendev/amundsen-search:2.4.099dda9502c3e
urllib3@1.22
1.23

Open the chart page →

11,174
kube-ops-viewfluent-operatorVerified publisher0.1.21 of 1See more

kube-ops-view fluent-operator 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
urllib3@1.22
1.23

Open the chart page →

1,848
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
urllib3@1.22
1.23

Open the chart page →

13,551
modem-statsgeek-cookbookVerified publisher6.4.21 of 1See more

modem-stats geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
billimek/sb6183-for-influxdb:latestbf8158556035
urllib3@1.22
1.23

Open the chart page →

1,075
rbd-provisionerkubesphere-testVerified publisher0.1.11 of 1See more

rbd-provisioner kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
kubesphere/rbd-provisioner:v2.1.1-k8s1.11b8ad79759bcd
urllib3@1.10.2
1.23

Open the chart page →

242
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
urllib3@1.22
1.23

Open the chart page →

4,911
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-urllib3@1.7.1-1build1
urllib3@1.7.1
no fix listed
1.23

Open the chart page →

41,427
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
urllib3@1.22
1.23
omecproject/onos-progran:1.0.05715e5648aa0
python-urllib3@1.13.1-2ubuntu0.16.04.1
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.23
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
urllib3@1.22
1.23

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
urllib3@1.22
1.23

Open the chart page →

26,211
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python-urllib3@1.13.1-2ubuntu0.16.04.1
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.23

Open the chart page →

38,865
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
urllib3@1.22
1.23

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
python-urllib3@1.13.1-2ubuntu0.16.04.2
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.23
voltha/voltha-netconf:1.6.037f80524c207
urllib3@1.22
1.23
voltha/voltha-ofagent:1.6.09ee8c1f4428c
urllib3@1.22
1.23
voltha/voltha-voltha:1.6.0ff596b62de59
urllib3@1.22
1.23

Open the chart page →

93,855
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
apache/couchdb:2.39f895c8ae371
urllib3@1.19.1
1.23

Open the chart page →

36,215
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-20060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23

Open the chart page →

27,477

Container images carrying it

36 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.23
6
hjacobs/kube-ops-view:20.4.058221b57d4d2
urllib3@1.22
1.23
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
urllib3@1.22
1.23
2
wurstmeister/zookeeper:latest7a7fd44a7210
python-urllib3@1.7.1-1build1
urllib3@1.7.1
no fix listed
1.23
2
amancevice/superset:0.28.1c8c04bfe3d66
urllib3@1.22
1.23
1
amundsendev/amundsen-search:2.4.099dda9502c3e
urllib3@1.22
1.23
1
apache/couchdb:2.39f895c8ae371
urllib3@1.19.1
1.23
1
billimek/sb6183-for-influxdb:latestbf8158556035
urllib3@1.22
1.23
1
blacktop/httpie:latestfc5e68e2f5ab
urllib3@1.22
1.23
1
ceph/daemon:latest-nautilus90f30824a96e
urllib3@1.10.2
1.23
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
urllib3@1.22
1.23
1
galaxy/galaxy-init:v18.010267bad550e6
python-urllib3@1.7.1-1ubuntu4
urllib3@1.7.1
no fix listed
1.23
1
galaxy/galaxy-stable:v18.018e577a626dfd
python-urllib3@1.7.1-1ubuntu4
urllib3@1.22
no fix listed
1.23
1
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
urllib3@1.22
1.23
1
kubesphere/rbd-provisioner:v2.1.1-k8s1.11b8ad79759bcd
urllib3@1.10.2
1.23
1
library/couchdb:2.3.0ee75c9a737e7
urllib3@1.19.1
1.23
1
linuxserver/deluge:18.04.10ac871624394
urllib3@1.22
1.23
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
urllib3@1.22
1.23
1
muluder/prograncontrollermcord:0.1.843b597a93da7
python-urllib3@1.13.1-2ubuntu0.16.04.1
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.23
1
neilpeterson/chart-tweet:latest64fd8dab075f
urllib3@1.22
1.23
1
neilpeterson/get-tweet:v28b645ac1a23e
urllib3@1.22
1.23
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
urllib3@1.22
1.23
1
neilpeterson/osba-storage-demo:latest29d229ab446e
urllib3@1.22
1.23
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
urllib3@1.22
1.23
1
neilpeterson/process-tweet:latest39ce9f92e899
urllib3@1.22
1.23
1
nlmacamp/check_mk:latest5dbb8589f824
urllib3@1.21.1
1.23
1
omecproject/onos-progran:1.0.05715e5648aa0
python-urllib3@1.13.1-2ubuntu0.16.04.1
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.23
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
urllib3@1.22
1.23
1
opendatacube/restcube:latest91870111837c
urllib3@1.22
1.23
1
opendatacube/wms:latest1b90cdf68831
urllib3@1.22
1.23
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
urllib3@1.22
1.23
1
voltha/voltha-cli:1.6.0c4e41e92f046
python-urllib3@1.13.1-2ubuntu0.16.04.2
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.23
1
voltha/voltha-netconf:1.6.037f80524c207
urllib3@1.22
1.23
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
urllib3@1.22
1.23
1
voltha/voltha-tester:1.7.0655c3048a602
urllib3@1.22
1.23
1
voltha/voltha-voltha:1.6.0ff596b62de59
urllib3@1.22
1.23
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.